
Error: rpki-repo.registro.br/repo/5o4X6HEih7Jxvm7j3pmAnht8NqBLAdW6PfLB2sh4NSL5/1/7ADC4A0F30F84A13F06E94A86F034E04BF92B875.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/5o4X6HEih7Jxvm7j3pmAnht8NqBLAdW6PfLB2sh4NSL5/1/7ADC4A0F30F84A13F06E94A86F034E04BF92B875.mft
File: 7ADC4A0F30F84A13F06E94A86F034E04BF92B875.mft (raw, json)
Hash identifier: ywK+91tXKGajNAZyyo7ssWTzosGAQuD7EzclSL0Hi3E=
Subject key identifier: AA:FE:3A:34:76:C1:1E:B2:3F:04:FE:8B:F4:A8:97:CA:5F:07:50:F6
Authority key identifier: 7A:DC:4A:0F:30:F8:4A:13:F0:6E:94:A8:6F:03:4E:04:BF:92:B8:75
Certificate issuer: /CN=7ADC4A0F30F84A13F06E94A86F034E04BF92B875
Certificate serial: 3CB857789DEDB847456D778A5A83C2BBE687B6E4
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7ADC4A0F30F84A13F06E94A86F034E04BF92B875.cer
Subject info access: rsync://rpki-repo.registro.br/repo/5o4X6HEih7Jxvm7j3pmAnht8NqBLAdW6PfLB2sh4NSL5/1/7ADC4A0F30F84A13F06E94A86F034E04BF92B875.mft
Manifest number: 02EB
Signing time: Wed 14 Oct 2026 05:26:36 +0000
Manifest this update: Wed 14 Oct 2026 05:21:36 +0000
Manifest next update: Thu 15 Oct 2026 06:16:36 +0000
Files and hashes: 1: 7ADC4A0F30F84A13F06E94A86F034E04BF92B875.crl (hash: 5ZRClDW6lOiAFxxC7E+OSRP/tPFg/JCc8pJ1vrgYNuc=)
2: 323830343a376531383a3a2f33322d313238203d3e20323731363032.roa (hash: I6CrKREpR3G1zKzM+l1uY0N/pDdfMeCiMRGy+koVDpE=)
3: 3137392e36332e3135362e302f32322d3232203d3e20323731363032.roa (hash: 0EUIWVU4my9U+y8UV07pvXmtiiUZqxEh8V0Q7xctVB0=)
4: 3137392e36332e3135382e302f32342d3234203d3e20323731363032.roa (hash: qWzAcV7Gz0DgMZ3ddonb6EFuyCmiEF8muRoKxtmGQOM=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/5o4X6HEih7Jxvm7j3pmAnht8NqBLAdW6PfLB2sh4NSL5/1/7ADC4A0F30F84A13F06E94A86F034E04BF92B875.crl
rsync://rpki-repo.registro.br/repo/5o4X6HEih7Jxvm7j3pmAnht8NqBLAdW6PfLB2sh4NSL5/1/7ADC4A0F30F84A13F06E94A86F034E04BF92B875.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7ADC4A0F30F84A13F06E94A86F034E04BF92B875.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 15 Oct 2026 06:16:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:b8:57:78:9d:ed:b8:47:45:6d:77:8a:5a:83:c2:bb:e6:87:b6:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ADC4A0F30F84A13F06E94A86F034E04BF92B875
Validity
Not Before: Oct 14 05:21:36 2026 GMT
Not After : Oct 15 06:16:36 2026 GMT
Subject: CN=AAFE3A3476C11EB23F04FE8BF4A897CA5F0750F6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:be:c1:3a:88:2a:9c:2c:48:fb:43:d5:93:48:
c7:0e:84:6c:10:65:21:af:ff:0b:20:73:5d:c3:de:
09:a4:c4:60:f0:d0:09:0f:e0:03:5f:37:6e:94:17:
ec:51:db:05:fe:ad:f5:7d:4c:d0:ec:bf:41:24:c8:
92:d1:22:66:44:08:44:28:8d:35:97:c6:7f:fb:53:
cf:0a:0e:4a:bb:22:3e:9e:9f:94:5b:87:01:3b:1b:
b8:40:22:82:1f:89:78:bd:6a:1e:ab:16:db:cb:7b:
11:42:e3:4c:17:57:99:b6:49:98:e2:05:b7:1d:c6:
5a:21:03:7b:8f:5d:08:ac:9e:13:2c:3b:0f:e2:53:
85:57:cd:a5:9c:0b:da:f0:be:a5:69:42:80:00:1c:
79:75:bd:b0:3c:19:97:0a:26:cf:47:e6:b1:ee:c6:
04:6a:67:2e:36:e7:9f:34:46:ee:57:de:f0:04:e5:
3f:09:f4:29:2f:bb:33:da:d4:66:8f:a4:5a:22:cd:
07:24:4c:83:13:35:85:65:d2:df:fe:be:91:9b:da:
ec:1c:0c:0c:e8:27:fd:a3:e2:70:59:0f:d0:6f:62:
86:0f:0c:6d:f5:8a:14:cc:28:6a:65:7c:7b:76:88:
95:de:fe:5d:6a:80:24:1c:08:d0:a7:b3:b8:ab:0d:
36:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:FE:3A:34:76:C1:1E:B2:3F:04:FE:8B:F4:A8:97:CA:5F:07:50:F6
X509v3 Authority Key Identifier:
keyid:7A:DC:4A:0F:30:F8:4A:13:F0:6E:94:A8:6F:03:4E:04:BF:92:B8:75
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/5o4X6HEih7Jxvm7j3pmAnht8NqBLAdW6PfLB2sh4NSL5/1/7ADC4A0F30F84A13F06E94A86F034E04BF92B875.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7ADC4A0F30F84A13F06E94A86F034E04BF92B875.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/5o4X6HEih7Jxvm7j3pmAnht8NqBLAdW6PfLB2sh4NSL5/1/7ADC4A0F30F84A13F06E94A86F034E04BF92B875.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:96:c5:73:8e:99:b6:6c:68:d6:91:cb:7c:90:1c:26:c5:b3:
db:01:8a:0f:40:e6:8d:7a:da:cd:ed:b6:63:4d:cb:5c:27:b0:
ba:8f:51:1b:35:49:78:62:cf:92:63:04:d4:f1:a5:63:f8:8d:
e0:c0:33:9f:81:2a:18:1c:db:9c:3d:f4:47:21:1a:04:43:08:
bd:f9:9d:70:85:a9:da:e5:44:73:8f:50:fe:09:a1:ba:5d:19:
f1:78:f7:90:05:fc:dc:b2:bf:00:6b:48:b3:14:c1:18:14:8a:
43:bd:3b:65:cd:da:84:e2:9d:f3:6e:4f:e2:dc:73:ac:7d:d3:
2e:eb:45:e1:80:1b:c2:9f:5c:d6:46:9a:d4:26:d5:c6:d0:3e:
99:f8:09:74:e9:58:0f:68:7c:88:d6:b8:29:49:5d:32:61:b5:
0f:40:8d:fc:73:2c:11:7b:af:e4:ae:86:a4:8d:ba:d7:86:ad:
72:91:a7:f8:4f:6f:7d:04:af:07:90:2b:c5:bc:e9:aa:bd:89:
e8:75:ca:19:d2:07:00:b2:27:65:e4:3a:81:b0:d4:db:63:9f:
89:bb:5e:ad:6e:e0:db:86:61:e4:87:9a:93:3f:7e:ff:2d:d2:
7e:27:9b:08:94:d3:37:8d:95:04:fe:f1:2c:5b:63:32:5a:07:
fd:76:73:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 13:27:52 2026 by rpki-client